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DETAILED ACTION 

1 . This communication is in response to applicant's amendment filed August 1 , 
2007. Claims 1-27 are currently pending in this case. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-27 rejected under 35 U.S.C. 103(a) as being unpatentable over Bianco 
et al (US 6,256,737). 

4. Regarding claim 1 - 

Bianco discloses a person authentication application data processing system for 
performing a person authentication process based on a verification process between a 
template extracted from a person identification certificate in which the template (104, col 
3 In 1-5, "compared measurements of unique personal characteristics") which is person 
identification data of an individual user who uses an information processing apparatus 
and user input sampling information, said person authentication application data 
processing system comprising: 

an information processing apparatus as a person authentication execution entity 
(e.g. col 3 In 7-17, "administration station"); and 

a person identification certificate authority as a person identification certificate 
issuing entity (e.g. col 3 In 33-40, "certificate authority system", 104), 
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wherein said information processing apparatus performs a process of retrieving a 
person identification certificate used for a person authentication process based on user 
input information, and, when the information processing apparatus determines that the 
person identification certificate has not been received from the person identification 
certificate authority and stored locally in a local storage device of the information 
processing apparatus, outputs a request for issuing a person identification certificate to 
the person identification certificate authority when a person identification certificate 
corresponding to the user input information cannot be extracted (e.g. col 16 In 5-20, 
""switchboard object receives the request, via comm. object, and creates receiver 
object') 

said person identification certificate authority creates a person identification 
certificate in which an encrypted template which can be decrypted in said information 
processing apparatus and performs an issuing process for the information processing 
apparatus (e.g. col 54 In 10-28, " digital certificate from a certificate authority"), and 

said information processing apparatus performs a process for storing the person 
identification certificate issued from said person identification certificate authority in the 
storage means of the information processing apparatus (e.g. col 54 In 10-28, "encrypted 
digital certificate containing . . . identification information"). 

5. Bianco does not use the same steps in the same order as the instant application. 
Mere re-ordering of steps, however, would be obvious to one of ordinary skill in the art 
and thus does not confer patentability. Note also that Bianco, at, e.g., : "FIG. 7 includes 
biometric server 104 (FIG. 1), computer 208 (or alternatively remote/web computer 210, 
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both from FIG. 2), authentication interface 704, authentication interface 706, 
authentication object 708, database object 710, policy object 712, comm object 716, 
comm object 718, authentication object 720 and biometric device object 722. Here, 
biometric server 104 is performing as the server and computer 208 is performing as the 
client." (col 22, In 41-49). 

6. Thus, Bianco does allow for either remote or local template checking. 

7. Regarding claim 2 - 

Bianco discloses a person authentication application data processing system according 
to Claim 1, wherein, in the process for storing the newly obtained person identification 
certificate in the storage means, when said newly obtained person identification 
certificate is a person identification certificate corresponding to the same user for an 
existing public key certificate which has already been stored in said information 
processing apparatus, said information processing apparatus performs a process for 
creating pair information of identifiers of each certificate and stores the pair information 
in the storage means (e.g. col 54 In 20-30). 

8. Regarding claim 3 - 

Bianco discloses a person authentication application data processing system according 
to Claim 1, further comprising a certificate authority as a public key certificate issuing 
entity, wherein, said information processing apparatus performs a process for retrieving 
a public key certificate used during data communication with an external apparatus with 
stored data of the storage means of the information processing apparatus being used 
as the retrieval target on the basis of the user input information, creates a pair of a 
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public key and a secret key when the applicable public key certificate cannot be 
extracted, transmits the created public key to the certificate authority which is the 
issuing entity of the public key certificate and makes a request for issuing a person 
identification certificate, said certificate authority performs a process for issuing a public 
key certificate corresponding to an individual user or a public key certificate 
corresponding to said information processing apparatus, and said information 
processing apparatus performs a process for storing the public key certificate issued 
from said certificate authority in the storage means of the information processing 
apparatus (e.g. col 54 In 20-30). 

9. Regarding claim 4 - 

Bianco discloses a person authentication application data processing system according 
to Claim 3, wherein, in the process for storing the newly obtained person identification 
certificate in the storage means, when said newly obtained person identification 
certificate is a person identification certificate corresponding to the same user for an 
existing public key certificate which has already been stored in said information 
processing apparatus, said information processing apparatus performs a process for 
creating pair information of identifiers of each certificate and stores the pair information 
in the storage means (e.g. col 2 In 50-60). 

10. Regarding claim 5- 

Bianco discloses a person authentication application data processing system according 
to Claim 3, wherein, in the process for storing the newly obtained person identification 
certificate in the storage means, when said newly obtained person identification 
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certificate is a person identification certificate corresponding to the same user for an 
existing public key certificate which has already been stored in said information 
processing apparatus, said information processing apparatus performs a process for 
creating pair information of identifiers of each certificate, stores the pair information in 
the storage means, and registers together a process identifier which identifies a process 
such as services to be used (e.g. col 55 In 45-60). 

1 1 . Regarding claim 6 - 

Bianco discloses a person authentication application data processing system according 
to Claim 1, further comprising a service distribution construction in which various 
services such as content distribution can be received from a service provider under the 
control of a service registration server on the condition of user registration for the 
service registration server, wherein said information processing apparatus performs a 
person authentication process based on a verification process between the template 
extracted from the person identification certificate in which the template which is person 
identification data of an individual user who uses the information processing apparatus 
is stored and user input sampling information and performs user registration for said 
service registration server on the condition that person authentication is established 
(e.g. col 55 In 45-60). 

12. Regarding claim 7- 

Bianco discloses a person authentication application data processing system according 
to Claim 1, further comprising a service distribution construction in which various 
services such as content distribution can be received from a service provider under the 
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control of the service registration server on the condition of user registration for the 
service registration server, wherein said information processing apparatus performs 
mutual authentication with said service provider by using a public key certificate 
corresponding to an individual user or a public key certificate corresponding to said 
information processing apparatus in a process for receiving service distribution from 
said service provider, and said service provider provides services for said information 
processing apparatus on the condition that it is confirmed that the public key certificate 
used for said mutual authentication corresponds to an authorized user or device 
registered in said service registration server and said mutual authentication is 
established (e.g. abstract, col 3 In 33-40). 

13. Regarding claim 8- 

Bianco discloses a person authentication application data processing system according 
to Claim 1, wherein data communication between said information processing 
apparatus as a person authentication execution entity and the person identification 
certificate authority as a person identification certificate issuing entity is performed on 
the condition that the mutual authentication process is established (e.g. abstract, col 2 
In 53 -col 3 In 5). 

14. Regarding claim 9 - 

Bianco discloses a person authentication application data processing system according 
to Claim 1, wherein, for data communication between said information processing 
apparatus as a person authentication execution entity and the person identification 
certificate authority as a person identification certificate issuing entity, a data 
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transmission part performs a process for creating an electronic signature for 
transmission data, and a receiving part performs a process for verifying the electronic 
signature (e.g. col 55 In 47-57). 

1 5. Regarding claim 1 0 - 

Bianco discloses a person authentication application data processing system according 
to Claim 1, wherein an encryption key used to encrypt the template stored in the person 
identification certificate issued from said person identification certificate authority is a 
public key which is set for said information processing apparatus or an individual user 
(e.g. col 55 In 37-45). 

16. Regarding claim 1 1 - 

Bianco discloses a person authentication application data processing system according 
to Claim 1 , wherein said template is biometric information of a person such as 
fingerprint information, retina pattern information, iris pattern information, voice print 
information, and handwriting information, or a non-biometric information such as a seal, 
a passport, a drivers license, and a card, or any combination of two or more of the 
biometric information and the non-biometric information, or a combination of any of the 
information and a password (e.g. abstract). 

17. Regarding claim 12 - 

Bianco discloses a person authentication application data processing method for 
performing a person authentication process based on a verification process between a 
template extracted from a person identification certificate in which a template which is 
person identification data of an individual user who uses an information processing 
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apparatus and user input sampling information, said person authentication application 
data processing method comprising (104, col 3 In 1-5, "compared measurements of 
unique personal characteristics") ; 

a step for providing an information processing apparatus as a person 
authentication execution entity and a person identification certificate authority as a 
person identification certificate issuing entity; (e.g. col 3 In 7-17, "administration 
station"); 

a step in which said information processing apparatus performs a process of 
retrieving a person identification certificate used for a person authentication process 
based on user input information, and, when the information processing apparatus 
determines that the person identification certificate has not been received from the 
person identification certificate authority and stored locally in a local storage device of 
the information processing apparatus outputs a request for issuing a person 
identification certificate to the person identification certificate authority which is a person 
identification certificate issuing entity when a person identification certificate 
corresponding to the user input information cannot be extracted (e.g. col 16 In 5-20, 
""switchboard object receives the request, via comm. object, and creates receiver 
object') 

a step in which said person identification certificate authority creates a person 
identification certificate in which an encoded template which can be decrypted in said 
information processing apparatus is stored and performs an issuing process for the 
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information processing apparatus (e.g. col 54 In 10-28, " digital certificate from a 
certificate authority"); and 

a step in which said information processing apparatus performs a process for 
storing the person identification certificate issued from said person identification 
certificate authority in the storage means of the information processing apparatus (e.g. 
col 54 In 10-28, "encrypted digital certificate containing . . . identification information"). 

18. Bianco does not use the same steps in the same order as the instant application. 
Mere re-ordering of steps, however, would be obvious to one of ordinary skill in the art 
and thus does not confer patentability. Note also that Bianco, at, e.g., : TIG. 7 includes 
biometric server 104 (FIG. 1), computer 208 (or alternatively remote/web computer 210, 
both from FIG. 2), authentication interface 704, authentication interface 706, 
authentication object 708, database object 710, policy object 712, comm object 716, 
comm object 718, authentication object 720 and biometric device object 722. Here, 
biometric server 104 is performing as the server and computer 208 is performing as the 
client." (col 22, In 41-49). 

19. Thus, Bianco does allow for either remote or local template checking. 

20. Regarding claim 1 3 - 

Bianco discloses a person authentication application data processing method according 
to Claim 12, wherein, in the process for storing the newly obtained personal 
identification certificate in the storage means, when said newly obtained person 
identification certificate is a person identification certificate corresponding to the same 
user for an existing public key certificate which has already been stored in said 
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information processing apparatus, said information processing apparatus performs a 
process for creating pair information of identifiers of each certificate and storing the pair 
information in the storage means (e.g. col 54 In 20-30). 

21. Regarding claim 14- 

Bianco discloses a person authentication application data processing method according 
to Claim 12, further comprising: 

a step for providing a certificate authority as a public key certificate issuing entity; 
a step in which said information processing apparatus performs a process for retrieving 
a public key certificate used during data communication with an external apparatus with 
stored data of the storage means of the information processing apparatus being used 
as the retrieval target on the basis of the user input information, creates a pair of a 
public key and a secret key when the corresponding public key certificate cannot be 
extracted, transmits the created public key to the certificate authority which is the 
issuing entity of the public key certificate; 

a step in which said certificate authority performs a process for issuing a public key 
certificate corresponding to an individual user or a public key certificate corresponding 
to said information processing apparatus; and 

a step in which said information processing apparatus performs a process for storing 
the public key certificate issued from said certificate authority in the storage means of 
the information processing apparatus (e.g. col 54 In 20-30). 

22. Regarding claim 15 - 
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Bianco discloses a person authentication application data processing method according 
to Claim 14, wherein, in the process for storing the newly obtained personal 
identification certificate in the storage mean, when said newly obtained personal 
identification certificate is a personal identification certificate corresponding to the same 
user for an existing public key certificate which has already been stored in said 
information processing apparatus, said information processing apparatus performs a 
process for creating pair information of identifiers of each certificate and for storing the 
pair information in the storage means (e.g. col 2 In 50-60). 

23. Regarding claim 16 - 

Bianco discloses a person authentication application data processing method according 
to Claim 14, wherein, in the process for storing the newly obtained personal 
identification certificate in the storage means, when said newly obtained person 
identification certificate is a person identification certificate corresponding to the same 
user for an existing public key certificate which has already been stored in said 
information processing apparatus, said information processing apparatus performs a 
process for creating pair information of identifiers of each certificate, storing the pair 
information in the storage means, and registering together a process identifier which 
identifies a process such as services to be used (e.g. col 55 In 45-60). 

24. Regarding claim 17 - 

Bianco discloses a person authentication application data processing method according 
to Claim 12, further comprising: a step for providing a service distribution construction in 
which various services such as content distribution can be received from a service 
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provider under the control of a service registration server on the condition of user 
registration for the service registration server; and a step in which said information 
processing apparatus performs a person authentication process based on a verification 
process between a template extracted from the person identification certificate in which 
the template which is person identification data of an individual user who uses the 
information processing apparatus is stored and the user input sampling information, and 
performs user registration for said service registration server on the condition that 
person authentication is established (e.g. col 55 In 45-60). 
25. Regarding claim 18 - 

Bianco discloses a person authentication application data processing method according 
to Claim 12, further comprising: a step for providing a service distribution construction in 
which various services such as content distribution can be received from a service 
provider under the control of a service registration server on the condition of user 
registration for the service registration server; a step in which, in a process for receiving 
service distribution from said service provider, said information processing apparatus 
performs mutual authentication with said service provider by using a public key 
certificate corresponding to an individual user who uses the information processing 
apparatus or a public key certificate corresponding to said information processing 
apparatus; and a step in which said service provider provides services for said 
information processing apparatus on the condition that it is confirmed that the public key 
certificate used for said mutual authentication corresponds to an authorized user or 
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device registered in said service registration server and said mutual authentication is 
established (e.g. abstract, col 2 In 53 - col 3 In 5). 

26. Regarding claim 1 9 - 

Bianco discloses a person authentication application data processing method according 
to Claim 12, wherein data communication between said information processing 
apparatus as a person authentication execution entity and the person identification 
certificate authority as a person identification certificate issuing entity is performed on 
the condition that the mutual authentication process is established (e.g. abstract, col 2 
In 53 - col 3 In 5). 

27. Regarding claim 20 - 

Bianco discloses a person authentication application data processing method according 
to Claim 12, wherein, for data communication between said information processing 
apparatus as a person authentication execution entity and the person identification 
certificate authority as a person identification certificate issuing entity, a data 
transmission part performs a process for creating an electronic signature for 
transmission data, and a receiving part performs a process for verifying the electronic 
signature (e.g. col 55 In 47-57). 

28. Regarding claim 21 - 

Bianco discloses a person authentication application data processing method according 
to Claim 12, wherein an encryption key used to encrypt the template stored in the 
person identification certificate issued from said person identification certificate authority 
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is a public key which is set for said information processing apparatus or an individual 
user (e.g. col 55 In 37-45). 
29. Regarding claim 22 - 

Bianco discloses an information processing apparatus for performing a person 
authentication process based on a verification process between a template extracted 
from a person identification certificate in which the template which is person 
identification data of an individual user who uses the information processing apparatus 
is stored and user input sampling information wherein said information processing 
apparatus performs a process for retrieving a person identification certificate used for a 
person authentication process based on user input information with stored data of the 
information processing apparatus being used as the retrieval target(104, col 3 In 1-5, 
"compared measurements of unique personal characteristics"), outputs a request for 
issuing a person identification certificate to a person identification certificate authority 
which is a person identification certificate issuing entity when the information processing 
apparatus determines that the person identification certificate has not been received 
from the person identification certificate authority and stored locally in a local storage 
device of the information processing apparatus (e.g. col 16 In 5-20, ""switchboard object 
receives the request, via comm. object, and creates receiver object') , and stores the 
person identification certificate issued from the person identification certificate authority 
in the storage means of the information processing apparatus (e.g. col 54 In 10-28, 
"encrypted digital certificate containing . . . identification information"). 
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30. Bianco does not use the same steps in the same order as the instant application. 
Mere re-ordering of steps, however, would be obvious to one of ordinary skill in the art 
and thus does not confer patentability. Note also that Bianco, at, e.g., : "FIG. 7 includes 
biometric server 104 (FIG. 1), computer 208 (or alternatively remote/web computer 210, 
both from FIG. 2), authentication interface 704, authentication interface 706, 
authentication object 708, database object 710, policy object 712, comm object 716, 
comm object 718, authentication object 720 and biometric device object 722. Here, 
biometric server 104 is performing as the server and computer 208 is performing as the 
client." (col 22, In 41-49). 

31 . Thus, Bianco does allow for either remote or local template checking. 

32. Regarding claim 23 - 

Bianco discloses an information processing apparatus according to Claim 22, wherein, 
in the process for storing the newly obtained personal identification certificate in the 
storage means, when said newly obtained person identification certificate is a person 
identification certificate corresponding to the same user for an existing public key 
certificate which has already been stored in said information processing apparatus, said 
information processing apparatus performs a process for creating pair information of 
identifiers of each certificate and for storing the pair information in the storage means 
(e.g. col 54 In 20-30). 

33. Regarding claim 24 - 

Bianco discloses an information processing apparatus according to Claim 22, wherein 
said information processing apparatus performs a process for retrieving a public key 
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certificate used for data communication with an external apparatus with stored data of 
the storage means of the information processing apparatus being used as the retrieval 
target on the basis of user input information, creates a pair of a public key and a secret 
key when a corresponding public key certificate cannot be extracted, transmits the 
created public key to the certificate authority which is a public key certificate issuing 
entity, makes a request for issuing a public key certificate, and performs a process for 
storing the public key certificate issued from said certificate authority in the storage 
means of the information processing apparatus (e.g. col 54 In 20-30). 

34. Bianco discloses an information processing apparatus according to Claim 24, 
wherein, in the process for storing the newly obtained personal identification certificate 
in the storage means, when said newly obtained person identification certificate is a 
person identification certificate corresponding to the same user for an existing public 
key certificate which has already been stored in said information processing apparatus, 
said information processing apparatus performs a process for creating pair information 
of identifiers of each certificate and stores the pair information in the storage means 
(e.g. coi 54 In 20-30). 

35. Regarding claim 26 - 

Bianco discloses an information processing apparatus according to Claim 24, wherein, 
in the process for storing the newly obtained personal identification certificate in the 
storage means, when said newly obtained person identification certificate is a person 
identification certificate corresponding to the same user for an existing public key 
certificate which has already been stored in said information processing apparatus, said 
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information processing apparatus performs a process for creating pair information of 
identifiers of each certificate, stores the pair information in the storage means, and 
registers together a process identifier which identifies a process such as services to be 
used (e.g. col 55 In 45-60). 
36. Regarding claim 27 - 

Bianco discloses a program providing medium for providing a computer program for 
causing a person application authentication data process for performing a person 
authentication process to be performed in a computer system based on a verification 
process between a template extracted from a person identification certificate in which 
the template which is person identification data of an individual user who uses an 
information processing apparatus and user input sampling information (104, col 3 In 1-5, 
"compared measurements of unique personal characteristics"), said computer program 
comprising: 

a step for retrieving a person identification certificate used for a person 
authentication process based on the user input information (e.g. col 16 In 5-20, 
""switchboard object receives the request, via comm. object, and creates receiver 
object'); 

a step for outputting a request for issuing a person identification certificate to a 
person identification certificate authority which is a person identification certificate 
issuing entity when the information processing apparatus determines that the person 
identification certificate has not been received from the person identification certificate 
authority and stored locally in a local storage device of the information processing 
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apparatus (e.g. col 16 In 5-20, ""switchboard object receives the request, via comm. 
object, and creates receiver object'); 

a step for creating pair information of identifiers of each certificate when said 
person identification certificate issued from said person identification certificate authority 
is a person identification certificate corresponding to the same user for an existing 
public key certificate which has already been stored in said information processing 
apparatus (e.g. col 54 In 10-28, " digital certificate from a certificate authority"); and 

a step for storing the pair information in the storage means (e.g. col 54 In 10-28, 
"encrypted digital certificate containing . . . identification information"). 

37. Bianco does not use the same steps in the same order as the instant application. 
Mere re-ordering of steps, however, would be obvious to one of ordinary skill in the art 
and thus does not confer patentability. Note also that Bianco, at, e.g., : "FIG. 7 includes 
biometric server 104 (FIG. 1), computer 208 (or alternatively remote/web computer 210, 
both from FIG. 2), authentication interface 704, authentication interface 706, 
authentication object 708, database object 710, policy object 712, comm object 716, 
comm object 718, authentication object 720 and biometric device object 722. Here, 
biometric server 104 is performing as the server and computer 208 is performing as the 
client." (col 22, In 41-49). 

38. Thus, Bianco does allow for either remote or local template checking. 

39. Examiner's note: Examiner has cited particular columns and line numbers in 
the references as applied to the claims above for the convenience of the applicant. 
Although the specified citations are representative of the teachings in the art and are 
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applied to the specific limitations within the individual claim, other passages and figures 
may be applied as well. It is respectfully requested from the applicant, in preparing the 
responses, to fully consider the references in entirety as potentially teaching all or part 
of the claimed invention as well as the context of the passage as taught by the prior art 
or disclosed by the examiner. 

Conclusion 

40. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

41. Matchett et al (US 5,229,764) discloses a continuous biometric authentication 
matrix. 

42. Musgrave et al (US 6,505,193) discloses a system and method of fast biometric 
database searching using digital certificates. 

43. Marckini et al (US 5,907,149) disclose an identification card with delimited usage. 

44. Ohtsuki et al (US 5,831 ,547) disclose a wireless card system. 

45. Khideckel et al (US 2001/0027527) disclose a secure transaction system. 

46. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Cristina Owen Sherr whose telephone number is 571- 
272-671 1 . The examiner can normally be reached on 8:30-5:00 Monday through 
Friday. 

47. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew J. Fischer can be reached on 571-272-6779. The fax phone 
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number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

48. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Cristina Owen Sner[/ 
Patent Examiner, AU 3621 
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